Audit infrastructure and software supply chains for security risks.
npx skills add https://github.com/pistosmin/base-one --skill cso-pistosmin
Please help me install this Agent Skill. Skill: cso Source: https://github.com/pistosmin/base-one/tree/main/.claude/skills/gstack/cso Command: npx skills add https://github.com/pistosmin/base-one --skill cso-pistosmin
Chief Security Officer mode focuses on infrastructure-first security audits to uncover secrets, supply chain, and pipeline risks, providing continuous visibility into your security posture.
Run the cso audit workflow to start an infrastructure-first security posture assessment across your stack.
High-intent search queries and answers about installing and using this skill.
To audit CI/CD pipeline and cloud infrastructure for security vulnerabilities, you need an infrastructure-first security review. This workflow scans your deployment pipelines and supply chains to identify risks, secrets, and OWASP/STRIDE threat vectors.
Secrets archaeology is the process of uncovering hardcoded credentials and hidden secrets within your software supply chain. It scrutinizes dependencies and pipeline configurations to identify exposed sensitive data and secure your continuous deployment workflow.
Yes, you can apply OWASP Top 10 and STRIDE threat modeling to AI-driven components. The security audit workflow assesses LLM integrations and AI-driven components to identify specific risks and verify your ongoing security posture.
The best way to run continuous security posture checks without alert fatigue is using a dual-mode scanning approach. A daily zero-noise check mode identifies critical active vulnerabilities, while a monthly comprehensive scan tracks security risk trends.
Yes, infrastructure-first security auditing includes active verification to confirm identified threats. It validates vulnerabilities across your cloud deployments and CI/CD pipelines through active checks rather than relying solely on static analysis.
You need a comprehensive security scan for monthly trend tracking and full OWASP/STRIDE coverage, whereas daily dependency supply chain scrutiny provides zero-noise checks to catch immediate risks in your software pipeline.
tan-yong-shengAudit dependencies, configurations, and infrastructure for security weaknesses and generate remediation plans.
xtrm-devAudit security controls and compliance posture for DevSecOps environments.
jayzalowitzAudit infrastructure, dependencies, and AI workflows for security weaknesses.
SafeAgent-BeihangDetect and mitigate runtime threats in OpenClaw environments via real-time behavioral monitoring.
